]> git.ipfire.org Git - thirdparty/gnutls.git/commit
signatures: distinguish RSA-PSS signatures with RSA PKCS#1 1.5 certificates from...
authorNikos Mavrogiannopoulos <nmav@redhat.com>
Tue, 6 Mar 2018 14:09:50 +0000 (15:09 +0100)
committerNikos Mavrogiannopoulos <nmav@redhat.com>
Fri, 9 Mar 2018 16:01:10 +0000 (17:01 +0100)
commit51d21634c9329463a8d7def24550ef268bc9b88c
tree49a8e2370b632040c8fbdbd03b9f8b51cef34677
parent02354f173e66df3dad4ac9447e4965aecfad65e8
signatures: distinguish RSA-PSS signatures with RSA PKCS#1 1.5 certificates from "pure"

This change enhances signature algorithms to have a private key algorithm
parameter. That is, to allow signature algorithms operating with a private
key of type X while the public key is of type Y. That is useful for the
RSA-PSS signatures which are of two types; one which is seen from servers
having PKCS#1 1.5 certificates, the other with RSA-PSS certificates, while
both utilize RSA-PSS private keys.

This is a draft-ietf-tls-tls13-23 change.

Resolves #400

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
20 files changed:
lib/algorithms.h
lib/algorithms/sign.c
lib/ext/signature.c
lib/includes/gnutls/gnutls.h.in
lib/priority.c
lib/privkey.c
lib/pubkey.c
lib/tls-sig.c
lib/tls13-sig.c
tests/common-cert-key-exchange.h
tests/dtls12-cert-key-exchange.c
tests/pkcs11/tls-neg-pkcs11-key.c
tests/privkey-verify-broken.c
tests/rsa-rsa-pss.c
tests/suite/tls-fuzzer/gnutls-cert.json
tests/suite/tls-fuzzer/gnutls-nocert.json
tests/tls-neg-ext-key.c
tests/tls12-cert-key-exchange.c
tests/tls13-cert-key-exchange.c
tests/tls13/prf.c